SUBLAKE runs the front office 24/7 for field and home service businesses — an AI Receptionist that answers every call, text and web chat and takes the job down, flagging urgent ones to your phone, and an AI Office Manager that handles reminders, confirmations and no-show follow-up. It includes online booking, payments, a unified contact record and analytics.

How much does SUBLAKE cost?

SUBLAKE has two plans, and both include the full AI Front Office — online booking, payments, and a unified customer record. Pro is $99/month with 300 voice minutes, 1,000 texts, 1,000 emails, 5,000 contacts and 3 team seats. Business is $299/month for busier shops: 1,000 voice minutes, 5,000 texts, 5,000 emails, unlimited contacts and seats, and priority support. Both have hard caps — never overage. Every account starts with a 14-day free trial — no credit card required.

What does the AI actually do?

The AI Receptionist answers every inbound call, text and web chat 24/7, answers questions about your services and prices, takes the job down — who, where, what is wrong and when suits them — and pushes urgent jobs to your phone. It never books a time itself: you call back and confirm it, or customers book themselves through your booking link. The AI Office Manager then sends the confirmation and reminders and follows up after a no-show.

Which industries is SUBLAKE built for?

SUBLAKE is built for field, home and commercial service businesses: plumbing, HVAC, electrical, roofing, landscaping, cleaning, pest control, appliance repair and the other trades where you are on a job and cannot pick up the phone.

Is there a free trial?

Yes. SUBLAKE includes a 14-day free trial on every account. No credit card is required to start, and you can cancel before day fifteen for $0.

GDPR Compliance

Last updated: July 21, 2026

SUBLAKE is committed to compliance with the General Data Protection Regulation (GDPR), the UK GDPR, and the Swiss FADP, and to protecting the rights of individuals in the European Economic Area (EEA), United Kingdom, and Switzerland. If you are in the EEA, UK, or Switzerland, the rights and protections described on this page apply to your personal data. This page outlines our compliance framework, your rights as a data subject, and how we protect your personal data.

1. Our GDPR Commitment

As both a data controller (for data we collect directly) and a data processor (for data our customers store on our platform), we are committed to:

Processing personal data lawfully, fairly, and transparently
Collecting data only for specified, explicit, and legitimate purposes
Minimizing data collection to what is necessary for the stated purpose
Ensuring data accuracy and keeping it up to date
Retaining data only as long as necessary
Implementing appropriate technical and organizational security measures
Maintaining records of our processing activities

2. Legal Basis for Processing

We process personal data under the following legal bases as defined in Article 6 of the GDPR:

Processing Activity	Legal Basis
Providing the Service	Contract performance (Art. 6(1)(b))
Payment processing	Contract performance (Art. 6(1)(b))
AI-powered automation	Contract performance (Art. 6(1)(b))
Security monitoring	Legitimate interest (Art. 6(1)(f))
Analytics and improvement	Legitimate interest (Art. 6(1)(f))
Marketing communications	Consent (Art. 6(1)(a))
Tax and legal compliance	Legal obligation (Art. 6(1)(c))

3. Your Rights Under GDPR

If you are in the EEA, UK, or Switzerland, you have the following rights in relation to your personal data:

Right of Access (Art. 15)

Obtain confirmation of whether we process your data and request a copy of it.

Right to Rectification (Art. 16)

Request correction of inaccurate personal data without undue delay.

Right to Erasure (Art. 17)

Request deletion of your personal data when it is no longer necessary for its original purpose.

Right to Restriction (Art. 18)

Request limitation of processing in certain circumstances (e.g., while verifying accuracy).

Right to Portability (Art. 20)

Receive your personal data in a structured, machine-readable format and transfer it to another controller.

Right to Object (Art. 21)

Object to processing based on legitimate interests, including profiling and direct marketing.

Right re: Automated Decisions (Art. 22)

Not be subject to decisions based solely on automated processing that significantly affect you.

We will respond to rights requests within 30 days. In complex cases or where there are many requests, this may be extended by an additional 60 days with prior notification.

4. Data Controller & Processor Roles

SUBLAKE acts in two capacities depending on the context:

As Data Controller: For personal data we collect directly from you (account information, usage data, marketing interactions). We determine the purposes and means of processing.
As Data Processor: For personal data that you (our customer) store on our platform (your contacts, customer communications, and business records). You determine the purposes; we process on your instructions.

When we act as a data processor, you remain the data controller and are responsible for ensuring you have a lawful basis for processing the personal data of your own customers.

5. Data Processing Agreement

We offer a Data Processing Agreement (DPA) to all customers as required by Article 28 of the GDPR. Our DPA covers:

Subject matter and duration of processing
Nature and purpose of processing
Types of personal data processed
Categories of data subjects
Obligations and rights of the controller
Standard Contractual Clauses (SCCs) for international transfers
The technical and organizational security measures we apply
The list of sub-processors we engage

Read our DPA

SUBLAKE's standard Data Processing Agreement is published in full and applies automatically to every customer with EU/UK/Swiss data subjects.

View the Data Processing Agreement →

Need a counter-signed PDF for your records? Email contact@sublake.com.

6. Sub-Processors

We engage the following sub-processors to help provide our Services. Each is engaged under a written agreement containing data-protection terms. Sub-processors marked "only when you connect it" receive data only if you choose to connect that channel or integration.

Sub-Processor	Purpose	Location
Supabase, Inc.	Database and file storage hosting	United States
Vercel, Inc.	Website and application hosting / content delivery	United States
Railway Corp.	Application (backend) hosting	United States
Anthropic, PBC	AI processing — understanding messages and drafting responses	United States
Vapi, Inc.	Real-time voice call handling for the AI Receptionist	United States
Twilio Inc.	Telephony and SMS delivery (phone numbers, calls, texts)	United States
Stripe, Inc.	Payment processing and payouts	United States
Resend (Plus Five Five, Inc.)	Transactional email delivery	United States
Loops (Loops Software, Inc.)	Product and lifecycle email	United States
Functional Software, Inc. (Sentry)	Application error monitoring	United States
Google LLC	Address suggestions while an address is typed (including on your booking page) and finding your business and its time zone when you sign up; plus calendar sync and sign-in when you connect a Google account	United States
Meta Platforms, Inc.	WhatsApp, Instagram, and Messenger messaging — only when you connect it	United States

The authoritative, current sub-processor list is maintained at /subprocessors. We will notify customers of any new sub-processor at least 30 days before it begins processing data. Customers may object to a new sub-processor as outlined in our DPA.

Public map services. To place an address on a map, draw the map and plan a route, the Services also use a few public services — U.S. Census Bureau (Census Geocoder), OpenStreetMap Foundation (Nominatim), komoot GmbH (Photon), OpenFreeMap. They are not sub-processors: each runs a public service under its own published terms, not under a written agreement with us, so each receives only what the task needs — an address line, the text being typed, the part of the map being viewed, or the two ends of a route — and never a customer's name, phone number or messages. What each receives, and where it is based, is listed at /subprocessors.

7. International Data Transfers

As our infrastructure is primarily located in the United States, personal data from EEA, UK, and Swiss residents may be transferred internationally. Where such data is transferred to a country not deemed adequate, we rely on:

Standard Contractual Clauses (SCCs): the European Commission's 2021 SCCs (Module Two: Controller-to-Processor) with our sub-processors
UK Addendum: the UK International Data Transfer Addendum to the SCCs for UK transfers
Swiss addendum: the Swiss FADP equivalent terms for transfers from Switzerland
Supplementary measures: additional technical safeguards such as encryption where appropriate

8. Technical & Organizational Measures

We implement technical and organizational security measures appropriate to the risk, consistent with Article 32 of the GDPR:

Technical Measures

Encryption of data in transit (TLS 1.2 or higher) and at rest (AES-256)
Tenant isolation so each customer's data is logically separated from others
Least-privilege access controls for the systems that hold personal data
Automated backups to support recovery

Organizational Measures

Confidentiality obligations for personnel with access to personal data
Use of reputable sub-processors engaged under data-protection terms
A documented incident-response process, including 72-hour breach notification

9. Data Breach Notification

In the event of a personal data breach, we will:

Notify affected customers (data controllers) without undue delay and within 72 hours of becoming aware of the breach
Provide detailed information about the nature of the breach, categories of data affected, and remedial measures taken
Cooperate with customers in their obligations to notify supervisory authorities and affected individuals
Document all breaches, including those that do not meet the notification threshold, as part of our internal records

10. Privacy Contact

For any GDPR-related inquiries, data subject requests, or to report a data protection concern, please contact us:

Privacy Contact

SUBLAKE Holdings LLC
Email: contact@sublake.com
Subject line: "GDPR Request"

11. How to Exercise Your Rights

To exercise any of your rights under the GDPR:

Email us at contact@sublake.com with the subject "GDPR Rights Request"
Include your full name, email address associated with your account, and the specific right you wish to exercise
Verification: We may ask you to verify your identity before processing your request
Timeline: We will acknowledge receipt promptly and fulfill your request within 30 days (extendable by up to 60 days for complex requests, with notice)

There is no fee for exercising your rights. However, we may charge a reasonable fee for manifestly unfounded or excessive requests, or refuse to act on such requests.

12. Right to Lodge a Complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can file a complaint with:

The supervisory authority in your country of residence
The supervisory authority in the country where you work
The supervisory authority in the country where the alleged infringement occurred

We encourage you to contact us first so we can attempt to resolve any concerns directly. We take all privacy complaints seriously and will respond promptly.